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PREAMBLE 



The Department of Defense of the United States of America (U.S. DoD) and the Ministry of 
National Defense of the Republic of Korea (ROK MND), hereinafter referred to as the "Parties": 

Recognising that the Exchange of Notes regarding the General Security of Information 
Agreement Between The United States of America and Korea, which entered into effect May 1, 
1962, as amended May 22, 1974, and September 24, 1987, applies to this MOU; 

Having a common interest in defense; 

Recognizing the benefits to be obtained from the mutual support in coordinating information 
assurance and computer network defense matters; 

Desiring to improve their conventional defense capabilities through the exchange of Information 
Assurance/Computer Network Defense (IA/CND) Information and in the planning and execution 
of combined military operations; and 

Recognizing the benefits to the Parties of cooperation in the mutual exchange of information 
related to cyber defense; 

Have agreed as follows: 
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ARTICLE I 



DEFINITION OF TERMS 



1.1. The Parties have jointly decided upon the following definitions for terms used in this 

MOU: 



Authorities 



Classified Information 



Computer Network 
Defense (CND) 



Contractor Support 
Personnel 



Controlled Unclassified 
Information 



Government officials listed in this MOU who are authorized to act 
on behalf of the Parties in matters pertinent to the implementation 
of this MOU. 

Official information that requires protection in the interests of 
national security and is so designated by the application of a 
security classification marking. This information may be in oral, 
visual, magnetic, or documentary form or in the form of equipment 
technology. 

Actions taken to protect, monitor, analyze, detect, and respond to 
unauthorized activity within information systems and computer 
networks. The unauthorized activity may include disruption, denial, 
degradation, destruction, exploitation, or access to computer 
networks, information systems, or their contents, or theft of 
information. CND protection activity employs IA protection 
activity. CND response includes alert or threat information, 
monitoring, analysis, detection activities, and trend and pattern 
analysis. 

Persons specifically identified as providing administrative, 
managerial, scientific, or technical support services to a Party under 
a support contract. 

Unclassified information to which access or distribution limitations 
have been applied in accordance with applicable national laws or 
regulations. It includes information that has been declassified but 
remains controlled. 



Designated Security 
Authority 



Establishments 



The security authority designated by national authorities to be 
responsible for the coordination and implementation of national 
industrial security aspects of this MOU. 

Government organizations listed in this MOU that provide, or have 
an interest in, the information to be exchanged through the Project 
Officers or Executive Agents. 



-> 



Executive Agents 



Information 
Assurance/Computer 
Network Defense 
Information (IA/CND 
Information) 

Information Assurance 
(IA) 



Intellectual Property 



Government organizations listed in this MOU that are authorized to 
act on behalf of the Authorities and that have responsibility for 
implementation, management, and data or information exchange 
procedures pertinent to this MOU. 

Any IA or CND knowledge that can be communicated by any 
means, regardless of form or type including, but not limited to, 
scientific, technical, business, or financial knowledge whether or 
not subject to copyright, patents, or other legal protection. 

Confidentiality, integrity, availability, authentication, and non- 
repudiation of information systems or information being handled by 
the information systems including actions to protect and defend 
these systems. 

In accordance with the World Trade Organization Agreement on 
Trade-related Aspects of Intellectual Property Rights of April 
15,1994, all copyright and related rights, all rights in relation to 
inventions (including patent rights), all rights in registered and 
unregistered trademarks (including service marks), registered and 
unregistered designs, undisclosed information (including trade 
secrets and know-how), layout designs of integrated circuits, and 
geographical indications, and any other rights resulting from 
creative activity in the industrial, scientific, literary, and artistic 
fields. 



Party 



A signatory to this MOU represented by its military or civilian 
personnel. Contractors and Contractor Support Personnel shall not 
be representatives of a Party under this MOU. 



Project Officers 



Response 



Representatives of Government organizations who are specifically 
authorized by Authorities to maintain policy oversight of IA and 
CND activities. 

All actions taken to handle incidents reported by or affecting 
members of the Parties. 



Standard Operating 
Procedure (SOP) 

Third Party 



Procedure to share IA/CND Information. 



A government or entity other than the Governments of the Parties 
and any person or other entity whose government is not the 
Government of a Party. 
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ARTICLE II 



OBJECTIVE AND SCOPE 

2. 1 . The objective of this MOU is to conduct information exchanges and related activities 
among the ROK MND, the U.S. DoD, the U.S. Pacific Command (USPACOM) and U.S. Forces 
Korea (USFK) in matters of IA and CND. The Parties shall conduct bilateral IA and CND 
activities and IA'CND Information sharing to contribute to both Parties' common goals of 
protecting information networks. Actions carried out within the scope of this MOU shall result 
in enhanced defensive capabilities to: 

2. 1 . 1 . improve the confidentiality, integrity, and availability of the information and the 
information systems used to transmit and process information for decision-makers; 

2. 1 .2. enhance the interoperability of U.S. and ROK forces; 

2. 1 .3. improve cyber attack prediction, detection, and response capabilities; 

2. 1 .4. improve interoperability, policy development, configuration management, and 
standardization of information and information systems to provide for more robust and reliable 
command and control systems; 

2.2. The scope of this MOU shall include: 

2.2.1. developing a Standard Operating Procedure (SOP); 

2.2.2. identifying technical solutions or administrative documentation required for the 
continuous exchange of IA/CND Information; 

2.2.3 exchanging information in the areas of incident response, investigation, and 
forensics; and 

2.2.4. exchanging information to improve interoperability in the area of security 
technologies employed and configuration management to facilitate rapid exchanges of IA/CND- 
rclated information during periods of peace, crisis, and hostilities. 

2.3. Exchanges of information under this MOU shall be on a reciprocal, balanced basis, such 
that the information provided or exchanged between the Parties, or through the designated 
Project Officers and Executive Agents, shall be of approximately equivalent value, quantitatively 
and qualitatively. 

2.4. No defense equipment or services may be exchanged or provided under this MOU. 
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ARTICLE III 



MANAGEMENT 

3.1. The Parties hereby establish the following Authorities for this MOU, or their equivalents in 
the event of reorganization: 

United States : Assistant Secretary of Defense (ASD), Networks and 

Information Integration (Nil) 
Republic of Korea : Deputy Minister, Planning and Coordination Office 

3.2. The Authorities shall be responsible for: 

3.2. 1 . reviewing, and recommending for approval to the Parties, amendments to this MOU 
in accordance with Article XIII (Entry into Force, Amendment, Termination, and Duration) of 
this MOU; 

3.2.2. exercising executive-level oversight of efforts provided in this MOU; 

3.2.3. resolving issues brought forth by the Project Officers; 

3 .2.4. designating Project Officer assignments and the list of Establishments; and 

3.2.5. employing best efforts to resolve, in consultation with the export control authorities 
of the Parties, any export control issues raised by the Project Officers in accordance with 
subparagraph 3.4.8 or raised by a Party's Authority in accordance with paragraph 3. 1 2. of this 
Article. 

3 .3. The following Project Officers for this MOU are responsible for the management of this 
MOU, and shall represent the Authorities. 

United States: Director, International Information Assurance Program, 

Office of the Assistant Secretary of Defense (OASD), 
Networks and Information Integration (Nil) 

Republic of Korea: Director General, Information Planning Bureau 

3.4. Project Officers for this MOU shall be responsible for: 

3.4. 1 . exercising policy oversight of activities under this MOU; 

3 .4.2. resolving issues brought forth by Executive Agents; 

3.4.3. referring to the Authorities issues that cannot be mutually resolved by the Project 
Officers; 
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3 .4.4. recommending to the Authorities the amendment or termination of this MOU; 

3.4.5. establishing and maintaining annual objectives for this MOU, as appropriate; 

3.4.6. Monitoring Third Party sales and authorized transfers in accordance with Article 
X (Third Party Transfers) of this MOU; 

3.4.7. providing oversight to the U.S.-ROK Information Assurance/Computer Network 
Defense Working Group (IA/CND WG) described in paragraph 3.7. of this MOU; and 

3.4.8. monitoring export control arrangements required to implement this MOU and, 
if applicable, referring immediately to the Authorities any export control issues that could 
adversely affect the implementation of this MOU. 

3.5. The Executive Agents for this MOU, who shall act as the designated operational points of 
contact, and have responsibility for implementation of the MOU and data/information exchange 
procedures, are: 



3.6. The Executive Agents shall: 

3.6.1. exercise day-to-day management of MOU implementation activities and 
information exchanges; 

3.6.2. maintain oversight of the security aspects of this MOU in accordance with Article 
VII (Disclosure and Use of IA/CND Information), Article VIII (Controlled Unclassified 
Information), and Article DC (Security) of this MOU; and 

3.6.3. establish and co-chair the Information Assurance/Computer Network Defense 
Working Group (IA/CND WG) described in paragraph 3.7. of this MOU. 

3.7. The Authorities, with the Project Officers, shall establish a working group coasisting of 
appropriate representatives to develop and maintain SOPs. The working group is designated as 
the L .S.-ROK Information Assurance/Computer Network Defense Working Group (U.S.-ROK 
IA/CND WG). The IA/CND WG shall maintain overall control for IA/CND activities within the 
scope of this MOU. 

3.8. The U.S.-ROK IA/CND WG shall, at a minimum, meet annually and as required to 
administer and coordinate IA and CND activities. The U.S.-ROK IA/CND WG shall determine 
the frequency and nature of the IA/CND Information exchanges, and shall establish procedures 
for rapid exchanges of CND-relatcd information during periods of peace, crisis or hostilities. 



United States: 
Republic of Korea: 



USPACOM, through USFK 
Information Planning Bureau, MND 
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3.9. The U.S.-ROK IA/CND WG shall be responsible for: 

3.9. 1 . providing required information to the Project Officers, as requested by the Parties; 

3.9.2. reviewing and providing progress reports to the Executive Agents of activities 
under this MOU; 

3.9.3. resolving bilateral IA and CND issues or forwarding to the Project Officers issues 
that cannot be resolved at their level; 

3.9.4. reviewing and forwarding to the Parties recommended amendments to this MOU 
in accordance with Article XIII (Entry into Force, Amendment, Termination, and Duration) of 
this MOU; 

3.9.5. maintaining oversight of the security aspects of this MOU; and 

3.9.6. developing and maintaining the SOP for information exchanges. 



3.10. The Establ ishments for this MOU arc: 



United States: 1. 

2. 
3. 



4. 
5. 

Republic of Korea: 1. 

2. 
3. 
4. 
5. 

6. 
7. 
8. 
9. 

3.11. The Establishments may: 

3.11.1. provide or receive IA/CND Information to be exchanged through Project Officers 
or Executive Agents; and 



U.S. Pacific Command (USPACOM) 
U.S. Forces Korea (USFK) 
U.S. Strategic Command (USSTRATCOM) 
and Joint Task Force-Global Network 
Operations (JTF-GNO) 
Defense Information Systems Agency (DISA) 
Defense-wide Information Assurance Program 
(DIAP) 

Information Planning Bureau of MND 
Defense Security Command (DSC) 
Joint Chiefs of Staff (JCS) 
Combined Forces Command (CFC) 
Defense Communication Control Force 
(DCCF) 

National Defense Computer Center (NDCC) 
Headquarters, ROK Army 
Headquarters, ROK Navy 
Headquarters, ROK Air Force 
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3. 1 1 .2. receive IA/CND Information directly from the originating Party with its consent. 

3.1 2. If a Party finds it necessary to exercise a restriction on the rctransfer of export- 
controlled information as set out in paragraph 7.10. of Article VII (Disclosure and Use of 
IA/CND Information) of this MOU, it shall promptly inform the other Party. If a restriction is 
then exercised and an affected Party objects, that Party's Authority shall promptly notify the 
other Party's Authority and they shall immediately consult in order to discuss ways to resolve 
such issues or mitigate any adverse effects. 
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ARTICLE IV 



CHANNELS OF COMMUNICATION AND VISITS 

4. 1 . IA/CND Information may only be exchanged by those Project Officers, Executive 
Agents, and U.S. or ROK individuals who are authorized to do so, and are cither appointed 
members of the U.S-ROK IA/CND WG or arc authorized representatives of Establishments. 
IA/CND Information exchanged between the Parties shall be forwarded via official channels for 
appropriate dissemination. 

4.2. Each Party shall permit visits to its Government facilities, agencies and laboratories, and 
contractor industrial facilities by employees or Contractor Support Personnel of the other Party 
provided that the visit is authorized by both Parties and the employees have all necessary and 
appropriate security clearances and need-to-know. 

4.3. All visiting personnel shall be required to comply with security regulations and 
procedures of the host Party. Any information disclosed or made available to visitors shall be 
treated as if supplied to the Party sponsoring the visiting personnel, and shall be subject to the 
provisions of this MOU. 

4.4. Requests for visits by personnel of one Party to a facility of the other Party shall be 
coordinated through official channels, and shall conform with the established visit procedures of 
the host Party. Requests for visits shall bear the name of this MOU and include a proposed list of 
topics to be discussed. 

4.5. Lists of personnel of each Party required to visit, on a continuing basis, facilities of the 
other Party shall be submitted through official channels in accordance with recurring visit 
procedures. 
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ARTICLE V 
FINANCIAL ARRANGEMENTS 

5.1. Each Party shall bear the full costs of its participation under this MOU. No funds shall be 
transferred between the Parties. A Party shall promptly notify the other Party if available funds 
arc not adequate to fulfill its responsibilities under this MOU. 
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ARTICLE VI 



CONTRACTUAL ARRANGEMENTS 

6. 1 . This MOU provides no authority for placing contracts on behalf of the other Party in 
connection with any IA/CND Information exchanges under this MOU. Furthermore, this MOU 
creates no responsibility to put in place contracts to implement any IA/CND Information 
exchanges under this MOU. 

6.2. Each Party shall legally bind its contractors to a requirement that the contractor shall 
not retransfer or otherwise use export-controlled information furnished by the other Party for 
any purpose other than the purposes authorized under this MOU. The contractor shall also be 
legally bound not to retransfer the export-controlled information to another contractor or 
subcontractor unless that contractor or subcontractor has been legally bound to limit use of 
the information to the purposes authorized under this MOU. Export-controlled information 
furnished by one Party under this MOU may only be retransferred by another Party to its 
contractors if the legal arrangements required by this paragraph have been established. 
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ARTICLE VII 



DISCLOSURE AND USE OF IA/CND INFORMATION 

7. 1 . Only information related to IA and CND shall be provided or exchanged under this 
MOU. 

7.2. Relevant information within the scope of this MOU may be provided or exchanged 
bilaterally between the Parties according to the disclosure policies of the originating Party. 

7.3. Information shall be provided or exchanged only when it may be done in accordance with 
the following provisions: 

7.3. 1 . Information may be made available only if the rights of holders of Intellectual 
Property rights are not infringed; and 

7.3.2. Disclosure must be consistent with the respective national laws, regulations, and 
policies of the originating Party. 

7.4. All IA/CND information that is subject to Intellectual Property rights shall be identified 
and marked, and it shall be handled as Controlled Unclassified Information or as Classified 
Information, depending on its security classification. 

7.5. IA/CND information that is exchanged under this MOU shall be disclosed to Third 
Parties by the receiving Party only in accordance with Article X (Third Party Transfers) of this 
MOU. 

7.6. This MOU does not alter the Parties' policies or procedures regarding the exchanges of 
intelligence or intelligence-related information, nor docs it provide authority for exchanges of 
intelligence information beyond that of existing Government instructions and notices governing 
exchange of intelligence information. 

7.7. IA/CND Information provided by the Parties under this MOU may be used by the other 
Party solely for information, evaluation, and planning purposes consistent with Article II 
(Objective and Scope) of this MOU. IA/CND Information shall not be used by the receiving 
Party tor any purpose other than the purpose for which it was furnished without the specific prior 
written consent of the furnishing Party, specifying the authorized use of the IA/CND Information. 
The receiving Party shall not disclose IA/CND Information exchanged under this MOU to 
contractors or any other persons, other than its Contractor Support Personnel, without the specific 
A'rittcn consent of the furnishing Party. IA/CND Information that is exchanged under this MOU 
shall only be disclosed to Third Parties by the receiving Party in accordance with Article X 
(Third Party Transfers) of this MOU. 



12 



7.8. The receiving Party shall ensure that Contract Support Personnel, contractors, or any 
other persons to whom it discloses IA/CND Information received under this MOU arc placed 
under a legally binding obligation to comply with the provisions of this MOU. 

7.9. No transfer of ownership of IA/CND Information shall take place under this MOU. 
IA/CND Information shall remain the property of the originating Party or its contractors. 

7. 1 0. Transfer of IA/CND Information shall be consistent with the furnishing Party's 
applicable export control laws and regulations. Unless otherwise restricted by duly 
authorized officials of the furnishing Party at the time of transfer to another Party, all export- 
controlled information furnished by that Party to another Party may be retransferred to the 
other Party's Contractor Support Personnel subject to the requirements of paragraph 6.2. of 
Article VI (Contractual Arrangements) of this MOU. Export-controlled information may be 
furnished by Contractor Support Personnel of one Party to the Contractor Support Personnel 
of the other Party pursuant to this MOU, subject to the conditions established in licenses or 
other approvals issued by the Government of the Party furnishing the information in 
accordance with its applicable export control laws and regulations. 

7.11. Each Party shall notify the other Party of any Intellectual Property infringement claims 
made in its territory as a result of the exchange of information pursuant to this MOU. Insofar as 
possible, the other Party shall provide information available to it that may assist in defending the 
claim. Each Party shall be responsible for handling all Intellectual Property infringement claims 
made in its territory, and shall consult with the other Party during the handling, and prior to any 
settlement, of such claims. 

7.12. No export-controlled information shall be provided or exchanged by either Party, except 
as otherwise provided in this MOU. 
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ARTICLE VIII 



CONTROLLED UNCLASSIFIED INFORMATION 

8. 1 . Except as otherwise provided in this MOU or as authorized in writing by the furnishing 
Party, Controlled Unclassified Information provided or generated pursuant to this MOU shall be 
controlled as follows: 

8.1.1. Such information shall be used only for the purposes specified in Article VII 
(Disclosure and Use of IA/CND Information) of this MOU; 

8. 1 .2. Access to Controlled Unclassified Information shall be limited to personnel whose 
access is necessary for the permitted use under subparagraph 8. 1 . 1 . of this Article, and shall be 
subject to the provisions of Article X (Third Party Transfers) of this MOU; and 

8.1 .3. Each Party shall take all lawful steps, which may include national classification, 
available to it to keep Controlled Unclassified Information free from further disclosure (including 
requests under any legislative provisions), except as provided in subparagraph 8. 1 .2. of this 
Article, unless the originating Party consents to such disclosure. In the event of unauthorized 
disclosure, or if it becomes probable that the information may have to be further disclosed under 
any legislative provision, immediate notification shall be given to the originating Party. 

8.2. To assist in providing the appropriate controls, the originating Party shall ensure that 
Controlled Unclassified Information is appropriately marked to indicate its "in confidence" 
nature. The Parties shall decide, in advance and in writing, on the markings to be placed on the 
Controlled Unclassified Information. 

8.3. Prior to authorizing the release of Controlled Unclassified Information to contractors, the 
Parties shall ensure the contractors are legally bound to control Controlled Unclassified 
Information in accordance with the provisions of this Article. 
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ARTICLE IX 



SECURITY 

9. ] . All Classified Information provided pursuant to this MOU shall be used, stored, handled, 
transmitted, and safeguarded in accordance with the Exchange of Notes regarding the General 
Security of Information Agreement Between the United States of America and Korea, which 
entered into ctfect May 1 , 1 962, as amended May 22, 1 974, and September 24, 1 987. 

9.2. Classified Information shall be transferred only through official Government-to- 
Govcmment channels or through channels approved by the Designated Security Authorities of 
the Parties. Such Classified Information shall bear the level of classification, denote the country 
of origin and the provisions of release, and the fact that the Classified Information relates to this 
MOU. 

9.3. Each Party shall take all appropriate lawful steps available to it to ensure that Classified 
Information provided or generated pursuant to this MOU is protected from further disclosure 
except as provided by paragraph 9.6. of this Article, unless the other Party consents to such 
disclosure. Accordingly, each Party shall ensure that: 

9.3. 1 . The recipient Party shall not release the Classified Information to any Third Party 
without the prior written consent of the originating Party in accordance with the procedures set 
forth in Article X (Third Party Transfers) of this MOU. 

9.3.2. The recipient Party shall not use the Classified Information for other than the 
purposes provided for in this MOU. 

9.3.3. The recipient Party shall comply with any distribution and access restrictions on 
Classified Information that is provided under this MOU. 

9.4. Each Party shall undertake to maintain the security classifications assigned to Classified 
Information by the originating Party and shall afford to such Classified Information the same 
degree of security protection provided by the originating Party. 

9.5. Each Party shall ensure that access to the Classified Information is limited to those 
persons who possess the requisite security clearances and have a specific need for access to such 
Classified Information. 

9.6. The Parties shall investigate all cases in which it is known or when there are grounds for 
suspecting that Classified Information provided pursuant to this MOU has been lost or disclosed 
to unauthorized persons. Each Party shall also promptly and fully inform the other Party of the 
details of any such occurrence, the final results of the investigation, and corrective action taken 
to preclude recurrence. 
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9.7. For any facility wherein Classified Information is to be used, the responsible Party or 
Establishment shall approve the appointment of a person or persons to exercise effectively the 
responsibilities for safeguarding at such facility the Classified Information pertaining to this 
MOU. These officials shall be responsible for limiting access to Classified Information involved 
in this MOU to those persons who have been properly approved for access and have a nccd-to- 
know. 

9.8 Information provided or generated pursuant to this MOU may be classified as high as 
SECRET. The existence of this MOU is UNCLASSIFIED, and the contents are 
UNCLASSIFIED. 
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ARTICLE X 



THIRD PARTY TRANSFERS 

1 0. 1 . The Parties shall not sell, transfer title to, disclose, or transfer possession of IA/CND 
Information received under this MOU to any Third Party without the prior written consent of the 
Government of the Party that provided the IA/CND Information under this MOU. Such consent 
shall not be given unless the Government of the intended recipient confirms in writing to the 
other Party that it shall: 

1 0. 1 . 1 . Not retransfcr, or permit the further retransfer of, IA/CND Information provided. 

1 0. 1 .2. Use, or permit the use of, IA/CND Information provided only for the purposes 
specified by the Parties. 

1 0.2. The providing Party's Government shall be solely responsible for authorizing such 
transfers and approving the purpose of such transfers and, as applicable, specifying the method 
and provisions for implementing such transfers. 
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ARTICLE XI 
SETTLEMENT OF DISPUTES 

11.1. Disputes between the Parties arising under or relating to this MOU shall be resolved only 
by consultation between the Parties and shall not be referred to a national court, to an 
international tribunal, or to any other person or entity for settlement. 
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ARTICLE XII 



GENERAL PROVISIONS 

12.1. The activities carried out under this MOU shall be carried out in accordance with the 
Parties' respective national laws and regulations, including their export control laws and 
regulations. The obligations of the Parties shall be subject to the availability of funds for such 
purposes. 

1 2.2. This MOU does not replace, amend, or terminate any existing bilateral information 
exchanges or cooperative programs. 

1 2.3. The Parties have mutually determined that this MOU creates binding obligations within 
each Party's responsibilities under international law. 
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ARTICLE XIII 



ENTRY INTO FORCE, AMENDMENT, TERMINATION, AND DURATION 

13.1. This MOU, which consists of a Preamble and thirteen Articles, shall enter into force upon 
signature by both Parties and shall remain in force for fifteen (15) years. The Parties shall 
consult no later than one year prior to the expiration of this MOU to decide whether to extend its 
duration. 

1 3.2. This MOU may be amended or extended upon the mutual written agreement of the 
Parties, which shall be signed by both Parries' Project Officers with the consent of both Parties' 
Authorities in accordance with subparagraph 3.2.1 . of Article III (Management) of this MOU. 

1 3.3. This MOU may be terminated at any time upon the written agreement of the Parties. In 
the event both Parties agree to terminate this MOU, the Parties shall consult prior to the date of 
termination to ensure termination on the most economical and equitable terms. 

1 3.4. Either Party may terminate this MOU upon 90 days written notification of its intent to 
terminate to the other Party. Such notification shall be the subject of immediate consultation by 
the IAWG to decide upon the appropriate course of action to conclude the activities under this 
MOU. In the event of such termination, the terminating Party shall continue participation, 
financial or otherwise, up to this effective date of termination. 

1 3 .5. The respective rights and responsibilities of the Parties regarding Article VII (Disclosure 
and Use of IA/CND Information), Article VIII (Controlled Unclassified Information), Article IX 
(Security), and Article X (Third Party Transfers) of this MOU shall continue notwithstanding 
termination or expiration of this MOU. 
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IN WITNESS WHEREOF, the undersigned, being duly authorized, have signed this 
Memorandum of Understanding concerning cooperation on Information Assurance (IA) and 
Computer Network Defense (CND). 

DONE, in duplicate, in the English and Korean languages, both texts being equally authentic. 

For the Department of Defense of the United For the Ministry of National Defense of the 
States of America Republic of Korea 




John G. Grimes 



Woo, Joo Ha 



Name 



Name 



Assistant Secretary of Defense 
Networks and Information Integration 



Deputy Minister 

Planning and Coordination Office 



Title 



Title 




Date 




Location 
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• ^ ^ 21 



tfl^^- n^f^ ^Wl*} W*}' 

1962 Hi 5^ 1 «a £3l3h 1974 y 5 ^ 22 °i, 1987^ 9 ^ 24 °i ^3 

W?]^" tt&Q ^S. Ji^> °1 zM°fl 3-8-3* <y 

aH«1 *$o]2}. ^iLsi >S-M«-ofl 5&°H ^ °}°A£ 

4-8-4 §oi ^*}£4. 



] 



^1 1 3i 



Authorities 

Classified 
Information 

Computer Network 
Defense (CND) 



•^•7} ^va-i ^S7l- *13£ ^.o> ^ K q Q ] x^Ais) 

<^ ^^il. °1 ^&$r £4 ^Efl ^ 71 

$ U <H, ^ ^-S"^- « ?17>S1^ 

^£ ^^N^B^ ^ti^l^l £^ ZL ifl-g-ofl tfl*}; J5L£, TjJf, ^ 

*i*h 4*1 « ^ *$$_2) ^£1- it*^. ^ehh^h 
tfl-g-S- 3i 3^^., ?M. #*1, 3*3= ^ aflfi 



Contractor Support 
Personnel 



TfleH 44 *J3, £3, 4^ Hl^r 7l^ ^l^-g-^^r 



Controlled Unclassif *fl# ^•7>^fr°fl ^ 3iL3 ^ ^^^^1 o>u] ^ 

ied Information ^HIt: -^-^H afl^slSM^ ^3*1 **( % V J1 Slfe ^ 



Designated Security °1 ^l^^l ^7}^<$ ilW^S] ^4 °W1 tflsfl ^-8- 



Authority 
Establishments 



^■7}^^H1 Ja.^fc*} 



£e|^4 0 14 3«8tH7l#-g- M 3^* *fl*«MM- ojofl 



Executive Agents 
tfl^7l^) 



#3 ^ 4fi afe 3^ £*H tflsfl a^-i- ^-^-71^ 



2 



Information Assuran 
ce/Computer Netwo 
rk Intense Informat 
ion(IA/CND Informa 
tion) WsLH&Qft 

Information Assuran 
ce (1A) (toiL^) 

Intellectual Property 



Party 
(^>^» 

Project Officers 
Response 

Standard Operating 
Procedure (SOP) 

(4tt) 

Third Party 
(4 3 ^r) 



3**1, ?M ^3 S.S. ^«-<4 ojol 4^, 7l#, 



^i^l^l Sfe ^ ^iL^ 71^^, ^3^, 7}-%- 

1994 \! 4^ 15 <a *fl^ ^l^fl^M ^ « 4$)^ 

^7l^(WT0) 4^, ^ ^4 ^.^^ 

« ^ sjtf, 3:a(7l«a ^ 

-f W 33. 3*1, zisIji ^ °fl 

*1« M£ °1 0 <J=*l|zM W*r3 ^5.^7}- 1 ^ 



5 9^7> °f\i £^ 7lEf 7l^ 



A]2 2i 



2 i £ <><H|zH3 ^£fe 3 ^31-4 # U <M3 4<?H sa°H W 1 ?!^ 

ig-A^Vfe'^ #4*}3 ^ S-iO] ^^2] Jill 7l^*]-7l %n ^ ^JlJi*/fl*El 

tflHJflH^<H *^ ^ ^J^/^fl-^HflH^ M *r<8#4. £ ^43 « 

2.1.1. si 4 3$ ^^H 4-§-3fe 71^, 

i^, ^44 

2.1.2. #3-54 ^5l*-8-^-8: W?!^. 

2.1.3. 4°1«1 ofl^, ^ £ cfl-g-^^-i: *HM?14. 

2 1 4 ^ui^ji -a ^ safe 43 **fl*fl*l« *fl**M ^«fl A i ^ « ^« 

2) 4iL £-g-4, ^ 7)|t, ^ ^M^N S^fl-* ##4?14. 

2.2. °1 <#*fl44sl «^fe c^-l: i$*4. 
2.2.1. ^l^(SOP) 7fl^-; 

2 2 2. ^iL^/^^lH^H y <M 3^ 4^r3 < ?l ^«"§: ^-fi-* *fl£ 
^ ELfe *S*j £4M 41. 

2.2.3. 42 ifl-S-. 2:4 ^ t4 £°H4 ^Ji 

2 2 4 ^4 ^71 ^ 'gJiJi^^^^a^ 3^ 4^ # 
^147171 3*H. 4-8-3 ^ 3 Stf £3 £°W4s} 45< £-§-4 7fl4£ 

23 a <#*fl44°fl ^TStb x^3°U 4fe 4, #44 *H, ^fe 

/^o] =^-*V 7}4» ^1 M W. 

2.4. 4^ U <H #wl4 4«1^5i ^fl^Wl ja^-slTm ^l^s]4 &fe4. 
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4S2i 

^ % M4r °l3.*l 4^4 2°1 £ °cNzMt- W ^^"^1- 0 J^*Vi, 3:^7fl^Al o)d\) 

3 2.1. °1 <$n^*\ A 13 2iVg2-, 7fl^, f^a ^ -fr3L7l?V)^ n}s}- £ <#*flzM 7^-8- 
%^}JL, W^-sl ^<?l-g- «>7l ^)«H 33 tf. 

3.2.2. £ ^zWl « ^fltH?-^ tf^-* ^*<S^- 

3.2.3. ^e^^l-oll -SI *fl ^|7l€ *fl£*. 

3.2.4. ^e]^^ °u 1J r ^ £31 71 ^ *1 

3 2.5. ^V*>3 -fr-frf-^ ^3*H. *fl 3.4.8 *M 3 7^ QQtt 

go] 47}i}7]x^ £^ £ 2i*}2) 4 3.12 1H W W^>7> *fl 

7l*> M3 -fH&M l^f" SW>7l3*il 

3. o] °£*IM*\S!\ 4-g-£l °1 <£*||zM3 #3 *U ^ #^*># ^fli 

p]^: ^1 ^JiJi^ Nil 

4. °<H)zM3 £5l#W£ 4-8-4 ^H>* #W4. 

3.4.1. £ ^^H^H tfl^r 

3.4.2. 3*3 £fl*37l£°ll 3*11 ^l7l€ «■ 

3.4.3. ^^^l $n *fl£€ t 3^. 

3.4.4. °1 <£*I|ZM3 7fl5g ^^HlTfl 



3.4.5. £ <#*flzM-& ^n^ll ^Sl" 3^*1 ^r^^Jl -fr^l. 

3.4.6. °1 °<HzM£) 4 10^(^1 3 °]&)<% ^^*M1 3 *V « £ ^7}^ °l?i-§- # 

3.4.7. °1 ^fl^M^ 3.7i%MH ^3 *V • cj ^ £24^/3 ^3 ^ H4| 3HM ^Jfc*" 

3.4.8. °1 ^^M^l oj^ofl %o] _Q_^£]^ -frM^ll- ^IsU, 7>^«- °1 oj:tfl 
-r. 

3.6. 3*3 tfl«87l^ 

3.6.1. ^SflzM ^ ^ f"^ ^^tI tIM 

3 6.2. °1 o^^fil ^ 7^(^^W^^H^1lH^a y 0 H ^JiS] ^7fl ^ oj-g-), *fl 8 

3.6.3. °l *fl 3.7 2:$ <Hl ^^^^tilB^a^ ^ 

3 7 ^7}.^, ^51^-^4 M. ofl^ -B-^ll- 3*4*1 tfli*>3. ^€ ^-r- 

^eHH^HIM «^ M# ^1^. 

3 8 *> • D l ^^^^MlH^B«oH ^-f <3 1 3 SE^r ^Jfi-AH nVi-H 

^E^lH^aiH #^1-* ^£l*>Jl 2:i§-*14. *I • D l 

Jl 3gAl, ^7l 5£^r ^tf^NH^a^H #3 ^ji^ a]^*V m^-g- ^^>1- 

^H*±4. 

3.9. *} ■ 4 ^^^^vilH^B«oH 4^ ^°J*14. 

3.9.1. ■fi-T 1 ^ ^* ^^^M ^*J4. 

3.9.2. £ ^fl^i 0 !! ^ ^l*S^-Jl^l- ^£^>Jl ^*|7l^-ofl ^l^W. 



6 



3.9.3. ^^/^^nib^h^cM ^lt-^g- n^ji, -^iehm «mt 

3.9.4. °1 «9=*fl^s1 ^ 13^(tJL, 7l|^, f^jl ^ -fi-S^W u}-eH ^jq-A]^ 7 fl 
(t 0 

3.9.5. o} ^z}-^ jioj- ^^c, 7 j.s.^ -fr^t]., nsU 

3.9.6. 3iL ^ -fr^t}. 
3.10. £ °<H)zH #3l7l££: 



1. 




2. 




3. 




4. 




5. 




6. 




7. 




8. 




9. 




1. 


"1 ^W^-f (USPACOM) 


2. 


^IH? (USFK) 


3. 


D l 3^4^ (USSTRATCOM)s)- 




t^7l^cfl (JTF-GNO) 


4. 


n] s^jjL (DISA) 


5. 


sj-HJ- ^iLiL^ ^(DIAP) 



7 



3.11.3-31 7l#£ 



3.11.1. ^MMy)^4r ^^^^E^iH<jq H ^ 3 

3.11.2. =8^. ^ M^o] ^7). Al> ^^^^EitilB^H^ JgJil- 
3.12. £ ^SflzM^ 72 (^J!±JiL^/3^LilBfelH ^£.2} *7H g ol-g.) <q 7. 10 ^-ofl 
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*)1 4 3^ 



4.1. £ °^^°fl 3*13 ^S]^-^, ^ «?17>1- «>ul, $ • D l 

4.2. 3" M^Vfe- A o Vc fl^ W*}^ 3€ £xr 3l^*fl *1^<?]^°1 ^4 A]^ t a>*> 71^-4 <g 
know)-fr ^-^.*ll 6 > 

<#*flzM oif-^Hi, fes^afl afltf-W* 
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A 5 2: 

4^- ^ 
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^16 2: 



6.1. <$*flzM^ £ ^fl^Wl 21 °^l2l ^JiiL^/S^tflMH^ # 

«fizWfe °1 0 <J=*II *M*HH °^l2l ^^/^^il^-lH^ ^ jujg-^. o]«g«> 
71 TfiSM: *fl« sqoj-g. IH^M 

1- at} s 31 *K£^- Til 2**H1 Til ^°1^^1 **V£^- ^^^s #*fl£H°> 
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A 7 Si 

£ <#*flzM z\o\}*]^ ^$.2.^ ^ ^E^iH^a^^H 

£ °<WlzM4 ^4*fl4 ^iLfe ^$.4^ ^fl ^ °£ 

^^.fe .2.5.4 a \A ^*<H 471*}- 3-f ^l^olM- 

7.3.1. ^iUr 43 ^«fl^^l ^-f 0 ^ °l-§-7>^-«ll^m-. 

7.3.2. ^-7flir *fl*^ <24*}4 ^7>^, ^ ^ 3 3 4 ^°1 0 > 

43 ^-g-g: ^ ins. ^iL^/^^lH^H^ «fl^ ^^^l 

10^(^1 3 4 4*1H , 2: ^^^^ ^*fl 3 *HIX| ^7fl€4. 

^ °o^44fe «£ W^>^ ^il Hfe ^JiL4 ^3} S^r £3*} 

4 gi>4, ^^JiL S$ 71^ ^-¥- ^ -2*1^ ^iL^^-S^- 

o^^fl A}-g-^ ^ c^C}. ^i^/^^lB^HMM o]7>€ 4"§"* ^1^ 

% t£a}44 ^13<?! A^A^ ^47} $21 T 5 ^ ^-^/^^i 

ofl ^51- h£4^ ^iUi^/^^lB3H#4 3£S Tfl^V 

44 4= 4*1 ol^ofl^l ^7flU ^ Si 4. °1 0 <J=*fl4<*H ^*fl ^J3.«/^#^i4I 
^oll 4*11 ^fl 3 ^7l]5]^o> *]-4. 

^^^^ Ma>^ ^ ^fl^ofl s)7]*\<*\ *}^-& T&a.iL&Qtt^qa.W 
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A>a}o} ^ ^ H Tfl o^. 

Til «*>Tr £ ii^-^ 6 5(31^8-^ ^) 6.2. ^ ^ 

*fl^:3 ^f- ^ t^M 4^ ^ SEfe 7lEf <£o]ofl ^£ofl 4 = cf. 

7.11. 4 £ ^^.^0.5. X>7] ^Svfloj]^ jtfl^ <a^o) *j 

7.12. °1 ^lsH $M *K <^ oJ« Q Vo} t^-a^o,] o^flAis: -fr^f-^ 
^7} ^1^5] 71 4 £4. 
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2)1 8^ 

8.1. °1 ^sflzWl ^el ^lsH Si^lM- #4*H *1 3.2.3. *i7>^ 

o] ^tfl^ofl t^e} ^l^£]7li4 f-^fl^ ^^.o. o^aj. ^ ^.^^4 

8.1.1. ^iUr 7 2:(^JiJi^^BimE^ 3 ig.^ ^ 7 f| ol^)oflA-1 

8.1.2. cfl*V ol 2^ £^ 8.1.1.M fi1*B ^ 
-fi-tb °J€1"S. ^ltJ-^H, £ ^SflzM^ 10 2:(*fl 3 A S^-ofl t4^c|-. 



8.1.3. ^ W*l"b °1 ^ 8.1.2.1MI aj-i- ^7]^ ^^7H cfl 

*)l ^Ji^I^ W^-7> Sfe n^tt *>HaJp-Ei jij: 

*>7l 3«H 7}-§-*V 2*11- #1«flo> #4. °lei^ 2:*Jfc ^-7>^o] 

8.2. -f-^fli- 4 71 3*fl, M€ *fl# $0.$ 

8.3. M€ 741 XI ^Mfe ^ *!7}5>7l *H, c$ ig-AV^fe. Tfl^l-Ol o] <£ 
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9 2: 

9.1. °<H14 A -H *fi^ S& y l^£ 1962 \i 5^1^ ^SSU, 1974 *d 5 € 
22 1987 Vl 9^ 24°^ 7fl^ tfl^^-4 oJwH'?] ^^<?V ^°ll 

H«-4^i°fl ^M*M °l-§-. ^ :H3:£4. 

9.2. 5L3.*1 ^ tfl 3^ ^ # #44^ ^l^^^^^^l- ^-n^Sl # 

9.3. o] as) 9.6. 2^1H ^13*1 &5M4, ^ol^ ^ 7flo fl ifl^. 4= #4*>°} 

9.3.1. ^JsL^^^ ^44^ £ AM 4 10#(*fl 3*H tfl# *||^)4 =g*H 44 *jiL 
afl*^ <244£| 4*] 4^sl SH ^ *fl 3^H^l£ ^7fl4*l 
&fe4. 

9.3.2. ^J^/r^ #44^r £ ^ A 13 ^-3 0 14°11^ °l-8-^l 
*t4. 

9.3.3. ^^^^ #44tt £ ^zWl ^43 tflS nils ^ ^ofl a. 

9.4. 4 ^44^ ^Ji^*^ #4471- 3$ ^ ^* -fM^ ^7} flja n «l-g- 
ofl cfl«fl ^ #447} ^*J4ai 3i*r 34 ^ 2i«& Mt «fl<*> #4. 

9.5. 4 #44fe *fl# 2L*Y*\7\ £ *f|# ^e*}7l^«- ^n*\9l ^A SX^r A 
s. n. tfl# *fl^*il4 $4. 

9.6. °<J= #44^ £ 3?1«W y l£-°l -fr-a h)«17}xH^1 *7flsISi4 
ji «v^47]vf n4 e>|7> SL^ 24*114 $4. 4 

^l^J ^^11- A o^^ ^WItII ^1^*1 ^LelJi $4. 
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10 2: 



A 3*} 

^. 7flj £fe 4,0.0]^^ ^ ^7} 4^-4 2£ 4^ 

10.1.1. M*Hr ^^^^^B^aM ^l" ^^1^^) 

10.1.2. 'gja/r^ W^tt # ^3 °.^ D J $2LlL&%tt 
10 2 ^J^l^ OT*>3 3**=- ^ 3 *W tfl^- *1 7 > £ - - 3-§-7} 
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*fl 113: 



4= 7H*\°W 7)^}^ 2^5]*1 
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*fl 12 2: 

>.3. <£ M*>f-8r £ M4^7> ^^*H ^V*>3 ^IM^H flfe 
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*fl 13 ^ 



13.1. ^£ ^ 13 7fl ^o_S. ^£ £ M^Mfe <# ^*fl ^3 ^ ^a] 

W 15ki7l 51^* 7>^14. <# #4*}^ ^ol£ £ ^z^o} nv 7l ^ x ^ £ 

13.2. £ <& ^Sla^^o] ^a] 7 fl^ zlo. - 4, ^. 

£ ^^M^ *fl 3 2l(^)^ 3.2.1.0fl 4= <# #A}*} ^A}^ ^.g. £oJ <£ 

13.3. °<H|zMfe M^S]^ %n ^€ <r $14. ^V^W £ 

13.4. ^ «a*9- ^tfl^r ^WlTfl ^5. aW* ^3. 90 «J ^ofl ^ f-j£#o_3.>*| 

*V c d ^^*1-7l 3^«v ^3-4. oiei*v ^jl7> ^«8^a a], ^ 

13.5. £ °<Hf|zH3 4 7 ^&iL^-/^^^}^]3.^o] 3^ ^ ^ ol^-x 8aL(-f^fl 
€ *fl 9 S(iL<?>) * *1 10^(^1 3 A « <$ ^e) ^ ^<y^ 
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tfl«:tl^ ^-¥-» tfla^H "ltf*^ ^*8-¥-# ifl£*H 

.o. ^ £| John G. Grimes 



3 3 



o o 



21 



